domain-finder

Pass

Audited by Gen Agent Trust Hub on Aug 6, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the Bash tool to run DNS lookups via dig, WHOIS queries, and status code checks via curl. These operations are localized to checking domain and social media handle availability, which is the core functionality of the skill.
  • [EXTERNAL_DOWNLOADS]: The skill makes network requests to github.com and instantdomainsearch.com to verify if names are taken. These requests are directed at well-known services and do not involve downloading or executing external scripts.
  • [PROMPT_INJECTION]: The skill ingests user-provided keywords to generate domain names. While the ingested data is interpolated into shell commands, the risk is mitigated as the agent generates specific domain candidates (filtered for length and characters) before passing them to the shell scripts.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 6, 2026, 01:53 PM
Security Audit — agent-trust-hub — domain-finder